MiniWeb Source Code Information Disclosure Vulnerability

Bugtraq ID:	34565
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 16 2009 12:00AM
Updated:	Apr 17 2009 09:36PM
Credit:	e.wiZz!
Vulnerable:	Stanley Huang MiniWeb 0
Not Vulnerable:

MiniWeb Source Code Information Disclosure Vulnerability

MiniWeb is prone to a vulnerability that lets attackers access source code because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable computer in the context of the webserver process. Information obtained may aid in further attacks.

We don't know which versions of MiniWeb are affected. We will update this BID when further details are available.

MiniWeb Source Code Information Disclosure Vulnerability

Attackers can exploit this vulnerability via a browser.

MiniWeb Source Code Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

MiniWeb Source Code Information Disclosure Vulnerability

References:

• MiniWeb Homepage (MiniWeb)
  
• Miniweb server Multiple Vulnerabilities ([email protected])